Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/i62L5hzjYksKE_EH5Gq18znb0TE.roa
File: i62L5hzjYksKE_EH5Gq18znb0TE.roa (raw, json)
Hash identifier: VFsTSBjPnMmyaBe0MPJbbm/i/KKx7t24tMgOOWGm34Y=
Subject key identifier: 8B:AD:8B:E6:1C:E3:62:4B:0A:13:F1:07:E4:6A:B5:F3:39:DB:D1:31
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AED15734A03AC50CC0FF468AC23B7A810
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/i62L5hzjYksKE_EH5Gq18znb0TE.roa
Signing time: Sun 01 Oct 2023 21:12:00 +0000
ROA not before: Sun 01 Oct 2023 21:12:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ed:15:73:4a:03:ac:50:cc:0f:f4:68:ac:23:b7:a8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 1 21:12:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bad8be61ce3624b0a13f107e46ab5f339dbd131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a7:1a:ca:01:17:5d:8f:e7:d1:d4:b2:7c:f5:
73:1c:b9:15:36:74:01:04:5f:a3:7b:33:e7:c0:f8:
ca:94:64:41:e2:e3:8d:5a:73:73:7e:70:49:9c:04:
d7:bd:a5:d7:ff:77:49:de:ea:6e:74:26:e7:de:bc:
6f:1c:1b:0e:70:87:eb:e2:7b:b6:d6:4d:8c:0d:fd:
09:d8:cc:7e:68:e5:5d:59:39:d8:50:54:49:5d:af:
2f:ba:14:08:26:c3:43:28:b0:2d:cb:c9:b0:1d:6c:
63:82:a5:b3:92:dd:2b:bf:43:f7:b9:b8:87:31:06:
a9:eb:fc:c0:c3:ae:35:40:39:ab:5d:9e:db:59:a4:
0d:ec:ba:19:9e:04:2f:f0:c9:34:19:ca:91:35:cc:
64:3e:c3:1b:6c:46:e2:a5:2d:a9:15:02:9c:ed:62:
f1:08:9b:e5:c9:1c:c8:ff:02:8c:21:ea:25:cc:98:
39:87:5d:93:a5:a8:c2:e3:a8:a2:01:7d:da:6d:a9:
b6:e3:d2:c5:70:b4:ff:6a:31:43:05:d0:47:d5:2c:
74:7e:7e:ad:2a:a9:27:e9:0a:5e:f0:b3:1a:56:9e:
67:fc:84:26:72:11:6e:14:d9:53:27:83:92:ae:26:
b2:d3:60:19:f9:de:52:bd:e1:b4:d6:10:22:fc:06:
7b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AD:8B:E6:1C:E3:62:4B:0A:13:F1:07:E4:6A:B5:F3:39:DB:D1:31
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/i62L5hzjYksKE_EH5Gq18znb0TE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:08:a6:9a:8b:51:6c:3e:cf:de:f5:b8:32:52:8f:93:69:a4:
7d:75:c3:6c:45:7b:e6:f6:2a:df:21:d9:a7:01:e5:2d:83:b0:
79:be:74:2f:b4:fa:50:e9:34:2e:9e:ec:a9:28:f7:1e:62:fe:
ae:c6:51:25:da:9e:af:06:bc:af:48:02:5b:03:37:5a:4b:49:
86:d6:80:15:11:a6:fc:8b:38:b6:35:25:a7:4c:4d:05:04:21:
47:ab:75:33:91:8e:8c:8c:a6:c8:57:0f:04:f5:cd:e8:f0:d5:
06:46:55:67:76:f8:24:bd:fd:ae:c4:c2:46:a8:5b:d2:ac:e3:
2e:ef:a4:b5:f9:46:31:7a:db:62:42:33:d7:f0:4c:33:45:3b:
f2:24:8d:b9:76:01:72:8e:e3:e2:48:f6:89:ba:ed:31:47:bf:
63:2b:b0:68:44:64:da:be:21:72:63:a2:4c:6b:85:fb:d6:0e:
76:a1:8b:29:29:ed:3e:88:1f:23:b0:74:54:73:d2:99:fa:2b:
44:88:36:08:e5:5a:e8:64:0b:a6:58:a0:16:b1:5c:ec:d1:11:
49:1b:9a:92:de:b7:2d:15:91:26:00:69:0a:b3:7c:8f:e8:c2:
4c:18:fe:df:00:6f:54:01:4c:70:d6:fa:19:ce:35:4a:ba:84:
33:1f:26:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:28:47 2025 by rpki-client